Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File:                     _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier:          rwbBBnlgl0HdMfBpUNt29rlRIxxLF686VXg/m6iuG7A=
Subject key identifier:   01:F6:28:9C:A8:D5:C4:AF:CD:37:A1:1E:6C:FA:D1:89:7E:76:53:69
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number:          78
Signing time:             Fri 31 Jan 2025 05:50:34 +0000
Manifest this update:     Fri 31 Jan 2025 05:50:34 +0000
Manifest next update:     Fri 07 Feb 2025 05:50:34 +0000
Files and hashes:         1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: 2y/YH84qah/oId/VEHky43eyDeyIOeNy5U27RhQKhHM=)
                          2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=)
                          3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Jan 31 05:50:34 2025 GMT
            Not After : Feb  7 05:50:34 2025 GMT
        Subject: CN=679c64aa-ca6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:43:ed:8d:b7:f7:96:05:9a:f4:d3:94:d8:
                    db:1d:2a:44:0a:a7:0c:00:5c:5a:1d:98:a4:75:06:
                    53:9e:50:30:c8:0a:cd:fe:28:cf:aa:b7:d7:26:96:
                    3b:1c:64:61:18:e3:08:02:8c:0a:c7:53:c1:b3:75:
                    87:f5:16:75:6c:08:11:2b:87:ca:3b:9a:ae:c6:33:
                    f9:bf:53:40:53:95:f3:c7:84:a8:bc:af:91:6d:76:
                    8c:13:f5:c7:f0:5e:16:78:e9:30:22:a3:8f:83:e7:
                    93:54:ba:61:b9:fd:0a:2d:a7:85:6b:16:06:91:73:
                    eb:4c:3b:d3:d8:c9:15:5b:de:45:f1:30:88:29:c9:
                    27:60:c3:84:7e:72:83:c3:04:49:05:92:43:fd:fb:
                    62:31:3a:0a:06:f8:05:e8:92:66:ec:b3:11:cd:78:
                    d1:bf:ef:dd:0d:69:fb:a8:39:51:44:e9:6a:c7:48:
                    27:97:31:36:06:10:70:00:15:b5:9b:27:ae:0c:61:
                    5e:b0:ce:62:f8:1d:6a:30:42:36:37:2f:1b:c8:79:
                    08:bb:f0:50:0d:ad:c4:08:c4:f8:c4:f8:0c:b7:e5:
                    45:89:40:27:7b:70:ae:a7:23:c3:42:bf:88:ef:67:
                    c2:d7:3f:dc:cd:0f:32:e0:9e:d2:a2:aa:09:56:a8:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:28:9C:A8:D5:C4:AF:CD:37:A1:1E:6C:FA:D1:89:7E:76:53:69
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:cf:82:68:c9:e0:cc:47:4e:a1:66:8d:a7:3c:12:a6:59:
         65:96:58:77:24:55:aa:a0:41:fc:93:d5:3f:c7:fb:48:83:d3:
         d3:9b:46:c8:a2:8c:72:42:66:16:bb:ac:b8:63:16:90:55:9a:
         93:ab:a0:a1:0a:ce:82:ae:d5:3b:9b:d7:2e:2a:b6:47:5c:21:
         f9:c9:bc:26:83:93:f4:de:fb:95:e4:7b:cf:25:4a:ee:fd:ea:
         f3:05:a7:6f:f6:82:77:13:e1:e0:c7:0c:86:01:64:dd:76:b1:
         e2:9d:fa:4e:25:2b:3c:40:46:00:7a:6b:1c:81:3c:98:18:46:
         48:b4:a3:70:a7:f3:ef:c8:a5:65:83:36:2f:ff:b2:d9:8f:fb:
         da:3c:0b:c4:1f:d5:86:2a:76:40:36:e8:06:53:d7:53:96:b3:
         1d:c3:79:6b:15:1d:f5:75:53:4b:5d:82:99:9d:53:d0:0d:db:
         7e:36:59:b9:6d:e0:91:df:3f:54:ab:4c:80:1b:be:0b:94:6f:
         c1:b9:13:cd:ea:5c:10:4f:ad:23:11:ff:3b:ad:9a:9b:f7:ff:
         21:df:6e:f5:65:8d:3b:03:ec:96:75:ca:67:e8:af:c2:c0:24:
         de:52:72:59:f5:55:54:44:cf:48:e4:be:2c:8c:a5:18:a2:bb:
         17:60:40:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NDNEQzExMC8GA1UEBRMoRkVBQkFEOTIzNUFFRjE3MDIzQ0RDRkIxNjE5MDI2RjND
RURCMkM3RjAeFw0yNTAxMzEwNTUwMzRaFw0yNTAyMDcwNTUwMzRaMBgxFjAUBgNV
BAMTDTY3OWM2NGFhLWNhNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCh10Ptjbf3lgWa9NOU2NsdKkQKpwwAXFodmKR1BlOeUDDICs3+KM+qt9cmljsc
ZGEY4wgCjArHU8GzdYf1FnVsCBErh8o7mq7GM/m/U0BTlfPHhKi8r5FtdowT9cfw
XhZ46TAio4+D55NUumG5/Qotp4VrFgaRc+tMO9PYyRVb3kXxMIgpySdgw4R+coPD
BEkFkkP9+2IxOgoG+AXokmbssxHNeNG/790NafuoOVFE6WrHSCeXMTYGEHAAFbWb
J64MYV6wzmL4HWowQjY3LxvIeQi78FANrcQIxPjE+Ay35UWJQCd7cK6nI8NCv4jv
Z8LXP9zNDzLgntKiqglWqJqHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAfYonKjV
xK/NN6EebPrRiX52U2kwHwYDVR0jBBgwFoAU/qutkjWu8XAjzc+xYZAm887bLH8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0M0RDLzk3REY3QTEyMzA2
MjExRUY5NzhCNDc2NEM0RjlBRTAyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxI
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvX3F1dGtqV3U4WEFqemMteFlaQW04ODdiTEg4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0
M0RDLzk3REY3QTEyMzA2MjExRUY5NzhCNDc2NEM0RjlBRTAyL19xdXRrald1OFhB
anpjLXhZWkFtODg3YkxIOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADz+z4JoyeDMR06hZo2nPBKmWWWWWHckVaqgQfyT1T/H+0iD09ObRsii
jHJCZha7rLhjFpBVmpOroKEKzoKu1Tub1y4qtkdcIfnJvCaDk/Te+5Xke88lSu79
6vMFp2/2gncT4eDHDIYBZN12seKd+k4lKzxARgB6axyBPJgYRki0o3Cn8+/IpWWD
Ni//stmP+9o8C8Qf1YYqdkA26AZT11OWsx3DeWsVHfV1U0tdgpmdU9AN2342Wblt
4JHfP1SrTIAbvguUb8G5E83qXBBPrSMR/zutmpv3/yHfbvVljTsD7JZ1ymfor8LA
JN5Scln1VVREz0jkviyMpRiiuxdgQLI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:43 2025 by rpki-client